Is your team interested in #UEFI Secure Boot and Intel Root of Trust? Do you want to understand how they actually work in real systems, and how they are attacked and defended in practice? Join our advanced hands-on training based on workshops already delivered to engineering and security teams, covering UEFI #SecureBoot internals, UEFI variables, and real-world vulnerabilities such as #BootHole, #BitPixie, recent #GRUB2 CVEs, and Intel Root of Trust weaknesses.

Der beliebte Linux-Bootloader Grub2 schließt offiziell die Sicherheitslücke BootHole und versteht nun mit LUKS2-verschlüsselte Partitionen. Bootloader Grub 2.06 verbessert Sicherheit

What Should You Know About the #GRUB2 Bootloader #Vulnerability ? Compromising the boot process can allow an attacker to subvert all higher-layer security controls related to the operating system. In July 2020, Eclypsium researchers discovered a buffer overflow #vulnerability, dubbed #BootHole, in the Grand Unified Bootloader version 2 ( #GRUB2), utilized by most #Linux systems and dual-boot systems with #Windows.
https://cyware.com/news/what-should-you-know-about-the-grub2-bootloader-vulnerability-d08721e2/?&web_view=true
#security #vulnerabilities

The #fixes to the #Linux #BootHole #fixes are in. The first release of patches to the #Linux #BootHole came with a show-stopping problem. The fixed machines wouldn't boot. For the most part, that problem has been solved.
https://www.zdnet.com/article/the-fixes-to-the-linux-boothole-fixes-are-in/#ftag=RSSbaffb68
#security #vulnerabilities #patches

¿Alguien tuvo problemas con la vulnerabilidad #BootHole?
https://fosspost.org/news/boothole-update-boot-issue-grub

Monday review – our recent stories revisited - Get yourself up to date with everything we've written in the last seven days - it's weekly roundup... https://nakedsecurity.sophos.com/2020/08/03/monday-review-our-recent-stories-revisited-2/ #weeklysummary #vulnerability #mondayreview #twitterhack #ransomware #boothole #prolock #irs